gatekeeper_2[.]5[.]0_windows_amd64[.]zip

resource
unpack001/gatekeeper.exe

gatekeeper_2.5.0_windows_amd64.zip

SHA256 b68c05df8f8f789ea18c483ccb4ef23b2a69c2be93af2e486b9f9e7b33a7ef90
MD5 1bb4ef49fa4146970904275d6a1d3c25
SHA1 d7b3382d486203b8378e87f0bcd6b5de24ef45c0
SHA512 32b9947b102dfeb84f201da3ac261db5f60a86e0b110ca82d086dbc400e2e973410a70d4a14216837c5de29de6e2dc2d020a2f34148c51ace7bbd50dc2fe5ae9
SSDEEP 196608:AEDklPNWnZUB0Kz7lycgBXsIEj+/IKvAR9THDc+TPlXCV:AEDktN4ZUB0Kz8pJsDj+/781jnPlSV
TLSH
T143863315E9247DBA783F437B6A2797E63ED825D6433ADC8B1C5304E8410CA16FDE207A
MD5 SHA1 SHA512 SSDEEP TLSH

LICENSE

SHA256 f3c14561a699233f46ad98bdd8c3d0a808a0fe79781bf8b7d792bcf949a6caf7
MD5 8c2afb627f285138ab674abc102b4a1a
SHA1 10e2e463222128872dd1508dced10f49de57f262
SHA512 21b9cf443150b2f0b0d4279a5dab542a5c6103660861c74d3899589f3942000cee98b1831469cba12744d1127e9f93ae685b0dd71ade0016376dbd8915067948
TLSH
T1C011461E72510762189A1360557468D5B22B715A7A5F2A84146DF245233A06CC5FB844
MD5 SHA1 SHA512 TLSH

README.md

SHA256 6f756d95719b9512682237b9237e6b63e4d6cea5cab67c1ddf1907dec73dd43a
MD5 f0145452789bf583caa3da3e048a2215
SHA1 1cce4f16c3d10204212de7e4d667c1a88f22e00a
SHA512 8eb56101c48ca45f480a74dbb93530dcb47671ef0cf26d41332d8fcc2e52f307e8103de05cc3b32aa4a784fecf4f943803cff6fa72fdcbfd12f6c7fe9e971d27
SSDEEP 3072:6fbbGf+g3oUFVGrnKLP7PQnbC/R5tzugnNW:6fbbRoFLP7pJ6gnNW
TLSH
T156A3F9676314377A4EB10361F21B93E0FB39D4AA2316346475DDC1AC270AAA9427F7CE
MD5 SHA1 SHA512 SSDEEP TLSH

configs/config.yaml

SHA256 0d89dc13ce66c82f72d7616e02b61a01685cc963511a7e4f596cc10a6c3ae94a
MD5 775be09d572052ada4ecee5a036f80e5
SHA1 57e534869c59ef8419dbb7ebc148b5b505f995da
SHA512 cc2e67138de08ecef3396abb0303bc60b5879c275183f3f83b5fa408a8ae89b00be1016120ea02e2ece013a017126f0b328aa8b694929069fde51ffba2c9c168
SSDEEP 384:3CwKtdQRJnxOylbi7NDEihuiPFPsPqPfUtvf1ec:ywimnxOylbSoiESOH8c
TLSH
T10E52A7126380757C8BD28296A56BC2E1A738995F53533C3975CE80DC1B09A1293BE7FF
MD5 SHA1 SHA512 SSDEEP TLSH

gatekeeper.exe

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 16953f5ce64f12a6977ec33247acbcbcfd74c2f0493551b989d4f3150dad2879
MD5 78792f2eada1078238ba614107379788
SHA1 691844cada208c592cf7cba923ccc2bde2ff1701
SHA512 cb789432dabf2b8bab7eb56e8f0d61882ff55eb46847251f2d77f452ebecc53b955a23569fd25d0aea90c77fd60a68c5c9008afb040f0daa3cf53bf45676f100
SSDEEP 196608:PM3MC5yvQoizzgGCmBAUPZNOEFHU8izBlt7XTJqmG8:PJizCmBAUyEFHH
TLSH
T172372743E8A144E5C1EDD2748562A1237BB17C458B34B7DB2B60F6242F77BD4AEBA310
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

582976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

10.7MB

Virtual Size

10.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10.9MB

Virtual Size

10.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

562KB

Virtual Size

32.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

304KB

Virtual Size

303KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

195KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ